Elementor: >> Website Builder Security Vulnerabilities
The Elementor Website Builder plugin before 3.0.14 for WordPress does not properly restrict SVG uploads.
CVSS Score
6.1
EPSS Score
0.001
Published
2021-01-06
An issue was discovered in the Elementor plugin through 2.9.13 for WordPress. An authenticated attacker can achieve stored XSS via the Name Your Template field.
CVSS Score
5.4
EPSS Score
0.002
Published
2020-08-31
Elementor 2.9.5 and below WordPress plugin allows authenticated users to activate its safe mode feature. This can be exploited to disable all security plugins on the blog.
CVSS Score
6.5
EPSS Score
0.005
Published
2020-08-21
The Elementor plugin before 2.8.5 for WordPress suffers from a reflected XSS vulnerability on the elementor-system-info page. These can be exploited by targeting an authenticated user.
CVSS Score
5.4
EPSS Score
0.004
Published
2020-01-28
The Elementor Page Builder plugin before 2.8.4 for WordPress does not sanitize data during creation of a new template.
CVSS Score
9.8
EPSS Score
0.009
Published
2020-01-22
Page 4